Trusted Execution Technology

6 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2020-8751 MEDIUM This Month

Insufficient control flow management in subsystem for Intel(R) CSME versions before 11.8.80, Intel(R) TXE versions before 3.1.80 may allow an unauthenticated user to potentially enable information. Rated medium severity (CVSS 4.6), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Intel Information Disclosure Converged Security And Manageability Engine Trusted Execution Technology

NVD

CVSS 3.1

4.6

EPSS

0.4%

CVE-2020-8745 MEDIUM PATCH This Month

Insufficient control flow management in subsystem for Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25 , Intel(R) TXE versions before 3.1.80. Rated medium severity (CVSS 6.8), this vulnerability is no authentication required, low attack complexity.

Privilege Escalation Intel Converged Security And Manageability Engine Trusted Execution Technology Simatic Drive Controller Firmware +19

NVD

CVSS 3.1

6.8

EPSS

0.4%

CVE-2020-8705 MEDIUM This Month

Insecure default initialization of resource in Intel(R) Boot Guard in Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, Intel(R) TXE versions. Rated medium severity (CVSS 6.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Privilege Escalation Intel Converged Security And Manageability Engine Trusted Execution Technology Server Platform Services

NVD

CVSS 3.1

6.8

EPSS

0.5%

CVE-2020-12303 HIGH This Week

Use after free in DAL subsystem for Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, Intel(R) TXE 3.1.80, 4.0.30 may allow an authenticated. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Denial Of Service Use After Free Intel Memory Corruption Converged Security And Manageability Engine +1

NVD

CVSS 3.1

7.8

EPSS

0.4%

CVE-2020-12297 HIGH This Week

Improper access control in Installer for Intel(R) CSME Driver for Windows versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, Intel TXE 3.1.80, 4.0.30 may. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Intel Microsoft Converged Security And Manageability Engine Trusted Execution Technology

NVD

CVSS 3.1

7.8

EPSS

0.4%

CVE-2019-0091 HIGH This Week

Code injection vulnerability in installer for Intel(R) CSME before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 and Intel(R) TXE 3.1.65, 4.0.15 may allow an unprivileged user to potentially enable. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Code Injection Privilege Escalation Intel RCE Converged Security And Management Engine +1

NVD

CVSS 3.0

7.8

EPSS

0.5%

CVE-2020-8751

EPSS 0% CVSS 4.6

MEDIUM This Month

Intel Information Disclosure Converged Security And Manageability Engine +1

NVD

CVE-2020-8745

EPSS 0% CVSS 6.8

MEDIUM PATCH This Month

Privilege Escalation Intel Converged Security And Manageability Engine +21

NVD

CVE-2020-8705

EPSS 1% CVSS 6.8

MEDIUM This Month

Privilege Escalation Intel Converged Security And Manageability Engine +2

NVD

CVE-2020-12303

EPSS 0% CVSS 7.8

HIGH This Week

Denial Of Service Use After Free Intel +3

NVD

CVE-2020-12297

EPSS 0% CVSS 7.8

HIGH This Week

Privilege Escalation Intel Microsoft +2

NVD

CVE-2019-0091

EPSS 1% CVSS 7.8

HIGH This Week

Code Injection Privilege Escalation Intel +3

NVD